Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/234683c2-051b-3a46-95a0-579e00bc100a.roa
File:                     234683c2-051b-3a46-95a0-579e00bc100a.roa (raw, json)
Hash identifier:          L72dUBLE5X/kwn+qfiES8CJ1srN/dJdED5Wt6dheceg=
Subject key identifier:   C4:00:82:63:65:AF:1C:FF:A2:78:6E:DF:20:CE:A3:E1:73:91:8F:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D932559B3D121A7B0B2DD8400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/234683c2-051b-3a46-95a0-579e00bc100a.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     396563
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:59:b3:d1:21:a7:b0:b2:dd:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=797a07ad-350d-4469-be83-dcdddda97892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:66:69:31:36:4a:37:63:19:31:aa:b6:cb:
                    71:63:17:4a:99:c0:95:d0:d3:a7:fc:d6:23:8a:94:
                    68:7b:2c:2c:3b:af:2b:c0:53:55:eb:34:90:2a:35:
                    b4:d8:cb:2e:5f:1a:1a:af:e4:fe:0f:3b:a8:35:38:
                    a0:40:85:8b:29:08:bf:19:a9:da:bb:33:3d:4c:b1:
                    c4:d3:0a:3b:e6:bc:7f:2b:e6:fd:00:6c:d2:2e:da:
                    87:6a:72:6e:fd:ed:57:5c:f4:fd:f4:52:87:c1:c2:
                    e6:4b:85:82:c4:15:ba:6e:25:b4:7b:2c:be:17:85:
                    75:dd:e9:43:82:89:8a:fd:8e:4b:d1:86:0a:83:1b:
                    43:95:dc:df:d7:64:e3:eb:6b:20:71:d7:a2:4e:36:
                    b2:4b:76:cd:4c:4b:e9:74:e4:ef:25:4b:45:a9:de:
                    a4:52:ed:08:e2:16:6f:5c:0f:b7:23:ac:a9:35:05:
                    13:0a:83:c1:e0:dd:20:86:b1:ea:85:44:cb:12:5f:
                    11:08:4c:69:a7:e7:58:d1:81:e5:e8:d8:ec:fe:c9:
                    d8:b2:1f:ef:61:8b:72:05:84:69:6e:eb:ee:ed:82:
                    9d:e9:d6:31:54:33:99:5d:26:88:7a:8b:d8:7c:f5:
                    f3:57:a0:33:b1:94:ce:8c:53:53:46:af:5d:06:c3:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:00:82:63:65:AF:1C:FF:A2:78:6E:DF:20:CE:A3:E1:73:91:8F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/234683c2-051b-3a46-95a0-579e00bc100a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:47:2e:28:aa:62:0d:1a:7c:2e:93:37:a4:d7:13:d6:60:41:
         b5:cc:71:d0:aa:b0:00:34:92:b5:f9:8a:09:85:4f:99:68:22:
         c1:60:f4:36:6a:89:6b:09:0b:c6:6f:c1:16:59:40:f5:e6:e0:
         2c:51:28:3d:0e:82:b3:5a:f4:7e:80:51:c7:47:d8:6a:31:78:
         a5:09:8a:c5:d5:b8:32:d9:96:e3:d4:66:ee:c0:09:c8:79:c9:
         80:ac:55:4c:7c:a9:72:30:73:97:5e:10:85:d6:45:1b:de:a1:
         77:c7:aa:0c:97:14:c2:ba:83:53:96:a3:7d:08:b6:59:8b:44:
         c6:e3:eb:d0:b4:41:ae:39:d6:aa:86:67:e3:00:6d:2d:4d:f0:
         18:64:58:f6:92:2c:7c:51:b8:66:17:07:07:f9:9d:8e:22:b7:
         a7:b4:45:ba:21:fd:f9:cb:cf:6a:8f:65:63:f6:14:9a:94:1c:
         07:dd:4f:81:d8:d2:05:83:e5:10:eb:dc:12:8a:9a:60:c4:cd:
         28:ff:20:02:9b:d9:0e:00:98:e2:93:f6:91:37:83:a3:cb:a7:
         39:d9:2b:58:c7:58:84:eb:68:ba:17:15:6f:a3:0e:28:c5:e5:
         55:af:e9:c6:2b:1b:78:1d:73:f1:eb:b9:17:d6:e6:37:e4:c2:
         97:b3:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:34 2026 by rpki-client